get_sensor.py

#!/usr/bin/env python3

##
# Copyright 2019 Mentor Graphics
# SPDX-License-Identifier: Apache-2.0

import tanrest, json, time, sys, base64
from pprint import pprint as pp
from time import sleep
import getpass
import getopt

def usage():
    print("""
    Usage:
        get_sensor.py [options]
    
    Description:
        Gets a tanium sensor by name and writes it to a file
    
    Options:
        -h, --help      display this help and exit
        -s, --sensor    [required] name of the tanium sensor to get
        --server        [required] tanium server (ip address or dns name) [required]
        --username      user name to connect to tanium with (defaults to logged in user)
        --password      password to connect to tanium with (will prompt if not provided)
        --persona       [optional] the persona to use for the session

    Example:
        ./get_sensor.py --server 139.181.111.21 --username tanium --sensor 'Chuck Norris Fact'

    """)

def main(argv):
    #print(argv)
    global loglevel
    creds = {}

    try:
        opts, args = getopt.getopt(argv,"d:hs:p:q:",["debug:","help","sensor=", "package=", "server=", "username=", "password=", "persona="])
    except getopt.GetoptError:
        usage()
        sys.exit(2)

    for opt, arg in opts:
        if opt in ('-h', '--help'):
            usage()
            sys.exit(2)
        if opt in ('-s', '--sensor'):
            sensorname = arg
        if opt in ('d', '--debug'):
            loglevel = arg
        if opt in ('--server'):
            creds['server'] = arg
        if opt in ('--username'):
            creds['username'] = arg
        if opt in ('--password'):
            creds['password'] = arg    
        if opt in ('--persona'):
            creds['persona'] = arg

    try:
        sensorname
    except NameError:
        print("--sensor parameter required")
        usage()
        sys.exit(2)

    # create a dictionary of arguments for the pytan handler
    handler_args = {}

    if 'server' not in creds:
        print("--server parameter required")
        usage()
        sys.exit(2)
    else:
        if 'http' not in creds['server']:
            creds['server'] = 'https://' + creds['server']
        if '/api/v2' not in creds['server']:
            creds['server'] = creds['server'] + '/api/v2'

    if 'username' not in creds:
        creds['username'] = getpass.getuser()
    if 'password' not in creds:
        creds['password'] = getpass.getpass()

    tan = tanrest.server(creds)

    sensor = tan.get_sensor(sensorname)

    ##
    # replace windows carriage return with standard newline for non-windows platform scripts.
    #  this is a workaround for a tanium UI bug introduced sometime around console version 2.1.702.000
    for script in sensor["queries"]:
        if script["platform"] != "Windows":
            script["script"] = script["script"].replace('\r\n', '\n')
    
    if not sensor:
        print('error getting sensor')
        sys.exit(3)

    out = json.dumps(sensor, indent=4)
    f = open('sensor/'+sensorname+'.json', 'w')
    f.write(out)
    f.close()

    print('wrote ' + str( out.__sizeof__() ) + ' bytes to "sensor/' + sensorname + '.json"')

    #qid = tan.req('get', 'saved_questions/by-name/Running%20Applications')['data']['id']
    #print tan.ask(qid)

if __name__ == "__main__":
   main(sys.argv[1:])